Daocloud 你家控制面板打不开了

[yuanfnadi]

chrome 提示风险，需要手动点击加载不安全的脚本才可以打开。

````

39865a78.vendor.js:1 Mixed Content: The page at 'https://dashboard.daocloud.io/orgs/myzd/runtime-apps' was loaded over HTTPS, but requested an insecure script 'http://dn-daodashboard-prod.qbox.me/app/39865a78.vendor.js?1507701118924'. This request has been blocked; the content must be served over HTTPS.


39865a78.vendor.js:1 Mixed Content: The page at 'https://dashboard.daocloud.io/orgs/myzd/runtime-apps' was loaded over HTTPS, but requested an insecure script 'http://shama5.com/?tsliese=27308832'. This request has been blocked; the content must be served over HTTPS.
a @ 39865a78.vendor.js:1
(anonymous) @ 39865a78.vendor.js:1
(anonymous) @ 39865a78.vendor.js:1


````

[Reficul]

您好，是不是被劫持了？
因为在 HTTPS 上请求 JS 文件应该也是 HTTPS 的，看样子遇到了 HTTPS 降级攻击？
shama5.com 这个域名不是我们的，代码里也没用过。